3f17a8f1fe6579c48875bfb75e885db1

Sharing

Copy URL Twitter E-mail

General

Target

3f17a8f1fe6579c48875bfb75e885db1
Size

120KB
MD5

3f17a8f1fe6579c48875bfb75e885db1
SHA1

923c49dda5dbfead353d1413710b52a4d813ee33
SHA256

54b47eea79b2d41edcb9464a2809ee4306a292c0475cd227f45f035b01b1b73a
SHA512

c742278ee1dc1fadd452a06c08bbeeec5d6a4820ca0a1c2a8c15cf4072351295320e02a77a18188cde39618666fa5fccf7259d05f66e9decad521c1f55ac3e78
SSDEEP

3072:HtNHc6cHgFtQdyzuvtm7qNPcDeXJewLJVqs6Ll:HfHc6cH6iEGPGEJesJVqsS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f17a8f1fe6579c48875bfb75e885db1

Files

3f17a8f1fe6579c48875bfb75e885db1
.exe windows:4 windows x86 arch:x86

a6849149ae9663f377f3d5ff3a52731f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
GetTickCount
GetTempPathA
lstrcmpiA
SetLastError
SetFileTime
SetFilePointer
CreateThread
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
GetStartupInfoA
SizeofResource
WriteFile
lstrlenA
CloseHandle
FreeResource
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
HeapFree
LoadLibraryA
GetProcAddress
lstrcmpA
GetLocalTime
GetModuleFileNameA
WinExec
CreateDirectoryA
CopyFileA
Sleep
lstrcpyA
lstrcatA
GetFileAttributesA
MoveFileA
SetFileAttributesA
DeleteFileA
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
ReadFile

user32

PostThreadMessageA
GetMessageA
wsprintfA
GetInputState

advapi32

CloseServiceHandle
GetUserNameA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
OpenSCManagerA
StartServiceA
OpenServiceA
CreateServiceA

shell32

ShellExecuteA

msvcrt

strstr
_controlfp
__set_app_type
strcpy
strcat
sprintf
fopen
rand
srand
time
fclose
fputs
memcpy
memset
exit
_except_handler3
realloc
malloc
strlen
strchr
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

ws2_32

WSAStartup
gethostbyname
WSACleanup
gethostname

urlmon

URLDownloadToFileA

netapi32

NetUserGetLocalGroups
NetApiBufferFree

Sections

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6849149ae9663f377f3d5ff3a52731f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

ws2_32

urlmon

netapi32

Sections

.data Size: 14KB - Virtual size: 14KB

.rsrc Size: 105KB - Virtual size: 104KB

.data
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 105KB - Virtual size: 104KB